Symantec Threat Hunter Team

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

A newly identified ransomware family named GodDamn, assessed as a rebrand of Beast ransomware, uses the PoisonX kernel driver to disable endpoint security software, posing an active threat to enterprise and consumer systems.